CVE-2026-87692
CVE-2026-87692 · Microsoft Exchange Server Elevation of Privilege Vulnerability
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Deserialization of untrusted data in Microsoft Exchange Server allows an authorized attacker to elevate privileges locally.
CVSS 7.8 · High · EPSS 1.6% · Fix available
- Published
- Updated
Affected products and versions
microsoft exchange server 2016 cumulative update 23
- Versions
- ≥ 15.01.0.0, < 15.01.2507.077: Affected (custom)
Update to 15.01.2507.077
microsoft exchange server 2019 cumulative update 14
- Versions
- ≥ 15.02.0.0, < 15.02.1544.050: Affected (custom)
Update to 15.02.1544.050
microsoft exchange server subscription edition rtm
- Versions
- ≥ 15.02.0.0, < 15.02.2562.056: Affected (custom)
Update to 15.02.2562.056